Naveen Kumar

About Naveen Kumar

An Information Security Operation and Management professional with 17+ years of experience in areas of IT Security, Threat Intelligence and Client Services Environment. Proficient in Identity and Access Management Services, SOC services, Vulnerability management and Threat intelligence. Practical experience in Security Operations Centre in Monitoring, Detection and Response functions and Threat intelligence and hunting. Proficiency in writing procedures, playbook for various projects, documents reviewed regularly and added regular updates.

Experience

1. Cyber Security Specialist

   BT Group

   Dec 2016 — Present · Gurugram, IN

   Threat monitoring, Incident Response (IR) and security remediation are all things that I am actively involved leveraging SIEM QRadar, Microsoft Defender, Azure AD, MCAS. Act as CTI Analyst and engaged with leading Threat Intelligence brands like Recorded Future & Anomali and responsible for capturing customer requirement and setup threat profile on the Recorded future. Provide Endpoint Detection and Response through CrowdStrike. Analyse offences, take actions and provide recommendations proposed to the customer. Contribute to and maintain documentation for systems, processes, procedures and create response plan against offences. Handling phishing emails for various customers and respond them using email security gateway (MessageLabs & PhishMe). Involved in new customer onboard in the security operation centre and perform knowledge transfer to security analysts. Act as technical reference and coordinate technical activities so that the contractual Service Level Agreement (SLA) are fulfilled for the Incident Detection and qualification. Faced internal and external audit for Cyber SOC and assisting in responses to security audits.

Education

• Utkal University

  Bachelor of Information Technology & Management

  2000 — 2003

Skills

• Arcsight
• System Administration
• Itil
• Security Operations Center
• Active Directory
• Windows Server
• Information Security
• Siem